From: Joseph Sutton <josephsutton@catalyst.net.nz>
Date: Mon, 28 Mar 2022 21:03:55 +0000 (+1300)
Subject: rpc_server/lsa: Match Windows security descriptor
X-Git-Tag: talloc-2.3.4~294
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=03894de3abb02045a10886ba40f94bf9a4d8a530;p=thirdparty%2Fsamba.git

rpc_server/lsa: Match Windows security descriptor

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Jeremy Allison <jra@samba.org>
---

diff --git a/source4/rpc_server/lsa/lsa_init.c b/source4/rpc_server/lsa/lsa_init.c
index cd4a1569aea..689634b9706 100644
--- a/source4/rpc_server/lsa/lsa_init.c
+++ b/source4/rpc_server/lsa/lsa_init.c
@@ -30,13 +30,14 @@
 	"O:BAG:SY" \
 	"D:" \
 	"(D;;0x00000800;;;AN)" \
-	"(A;;GA;;;BA)" \
-	"(A;;GX;;;WD)" \
+	"(A;;0x000f1fff;;;BA)" \
+	"(A;;0x00020801;;;WD)" \
 	"(A;;0x00000801;;;AN)" \
 	"(A;;0x00001000;;;LS)" \
 	"(A;;0x00001000;;;NS)" \
 	"(A;;0x00001000;;;S-1-5-17)" \
-	"(A;;0x00000801;;;S-1-15-2-1)"
+	"(A;;0x00000801;;;AC)" \
+	"(A;;0x00000801;;;S-1-15-2-2)"
 
 static const struct generic_mapping dcesrv_lsa_policy_mapping = {
 	LSA_POLICY_READ,